Enter your own Checkmk ideas or vote for existing ones

In order to continually improve Checkmk, we're looking for your ideas. They provide valuable input to our roadmap discussions and allow us to contact you directly for more in-depth discussions or during development. A few tips:

Further information can be found in this guide. If you have any questions, please send an email to feedback@checkmk.com.

Agent bakery: SECURITY: show all changes why agents has to be bake

Show all changes which leads the bakery to say that the agents has to be bake. As well the changes for custom files, just show all changes. Reason: Security: To have ...
Suggested by: JPH (05 Jul, '23) Upvoted: 2 days ago Comments: 0
Under consideration Agent Bakery

AgentUpdater: Allow waves of updating

In our enviroment we use update waves, to decide if an update is good.
Suggested by: Christian (31 May, '22) Upvoted: 19 Apr Comments: 2
Under consideration Agent Bakery

Agent Bakery: Allow more complex folder structure for custom files

In my installation, I have many custom files. The current flat folder structure makes the management of them complex. Please allow a more complex folder structure for ...
Suggested by: Thomas Lippert (18 Nov, '22) Upvoted: 17 Apr Comments: 0
Under consideration Agent Bakery

Make Agent-Package access rights customizable

Hi, We primarily use the agent RPM packages from the checkmk Enterprise Bakery. I have noticed that the folders and files of the unpacked RPM package currently have ...
Suggested by: Christian Friedrich (03 Apr) Upvoted: 03 Apr Comments: 0
Under consideration Agent Bakery

Enable a secure distributed agent bakery in Managed Service setups

Currently we are not able to use the distributed agent bakery in our MSP setups, as the needed https connection from the satellite to the central site is a major ...
Suggested by: Andre Eckstein (14 Mar) Upvoted: 20 Mar Comments: 0
Under consideration Agent Bakery

MSI installer packages from bakery should be signed

At 2.1.0 the MSI installer packages are no longer signed. Only the check_mk_agent.exe is signed. This causes trouble with automatic deployment thru the bakery, ...
Suggested by: Florian Ketelsen (16 Nov, '23) Upvoted: 08 Mar Comments: 0
Under consideration Agent Bakery

Agent bakery: "Bake and sign" for only specific hosts

We need a faster "Bake and sign" when we made some modifications for specific hosts. Then we need a "Bake and sign" for only these specific hosts, not for all which ...
Suggested by: JPH (01 Jul, '22) Upvoted: 13 Feb Comments: 1
Under consideration Agent Bakery

Citrix Farm Bakery Rule

While working with one of your consultants on a professional services engagement, he recommended I open a feature request for the Citrix Farm plugin. The current ...
Suggested by: Todd Dresser (09 Oct, '23) Upvoted: 07 Feb Comments: 0
Under consideration Agent Bakery Checks&Agents

Support Hardware Security Modules (HSMs) for Agent Bakery Keys (PKCS#11)

The agent bakery "sign key" (private) keys are dangerous. Access to the private keys will enable an attacker to install software on each host with agent updates ...
Suggested by: Christian Wittenhorst (20 Oct, '23) Upvoted: 15 Nov, '23 Comments: 0
Under consideration Agent Bakery

Include customizations of the plugin files into the agent hash

The main reason for this request is the need to re-roll all agents after you changed a plugin or config file, but the agent bakery doesn't realize, that there are new ...
Suggested by: Kruzgoth (04 May, '23) Upvoted: 03 Nov, '23 Comments: 2
Under consideration Agent Bakery

Enable transfer of generic agents to distributed sites via config or API

Problem with new hosts in distributed setting. There is an API endpoint to download the latest generic package. ...
Suggested by: MarkusS (23 Mar, '23) Upvoted: 21 Sep, '23 Comments: 0
Under consideration Agent Bakery RestAPI

Agent Bakery and update agent as non-root

Today it's possible to have the agent bakery create an agent that is not running as root. However this does not allow the agent to update itselves. It would be ...
Suggested by: Andy (22 Oct, '22) Upvoted: 21 Sep, '23 Comments: 0
Under consideration Agent Bakery Checks&Agents

Agent bakery: SECURITY: define and verify custome files

Defining only one directory is very risky, someone can change the files and no one will detect it, not even the admin who distributes the files via bakery So we need ...
Suggested by: JPH (05 Jul, '23) Upvoted: 18 Sep, '23 Comments: 0
Under consideration Agent Bakery

Security: Move agent-to-server communication (agent registration and updates) to separate port

At the moment, all agents that utilize Automatic Agent Updates need access to the regular IP address and port of their Checkmk instance in order to register for and ...
Suggested by: P. Wagner (07 Aug, '22) Upvoted: 21 Aug, '23 Comments: 3
Under consideration Agent Bakery Site management

Sort the list of custom files in the agent bakery rule set "Deploy custom files with agent"

When providing custom files to be deployed via the agent bakery, the files are read and displayed as checkbox items in the mentioned rule set. This list is ...
Suggested by: Marcel Arentz (13 Jul, '22) Upvoted: 05 Jul, '23 Comments: 0
Under consideration Agent Bakery

Agent Bakery: Configuration Preview

Allow the admins to see the configuration files in the agent (e.g. YML or CFG) to verify the configuration without deployment
Suggested by: Thomas Lippert (29 May, '22) Upvoted: 05 Jul, '23 Comments: 0
Under consideration Agent Bakery Usability

bakery should be. more verbose

Hallo, the bakery should be. more verbose. If you ve a large number of agents there is no information about progress or estimated time to finish the job. Ralf
Suggested by: Ralf Prengel (06 Jul, '22) Upvoted: 25 Aug, '22 Comments: 0
Under consideration Agent Bakery Usability